Web/SEO/App Spam from Google Gmail Part 2

------=_NextPart_000_759A_01DC6471.B59A90C0

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">






charset=3Dus-ascii">




















style=3D'color:#244061'>Hello,






style=3D'color:#244061'>Would you be interested in building a new site, =

or

possibly rebuilding/repairing your existing site: =

www.nk.ca with

the latest added features? We are a professional Web and App Development

company.






style=3D'color:#244061'>I would like to send you my Website Proposal and =

examples

of websites to see the kind of quality you can expect to =

receive.






style=3D'color:#244061'>Do let me know if you are interested. =






style=3D'color:#244061'>Kind Regards,


Mark,






style=3D'color:#244061'>Sales Team,
style=3D'font-size:11.5pt;

color:#222222'> 

style=3D'font-size:12.0pt;font-family:"Times New Roman","serif";

color:#222222'>






style=3D'font-size:11.5pt;color:#222222'> 
style=3D'font-size:

12.0pt;font-family:"Times New =

Roman","serif";color:#222222'>






style=3D'font-size:11.5pt;color:#222222'> 
style=3D'font-size:

12.0pt;font-family:"Times New =

Roman","serif";color:#222222'>






style=3D'font-size:11.5pt;color:#222222'>










style=3D'font-size:11.5pt;color:#222222'> 






style=3D'font-size:11.5pt;color:#222222'> 






style=3D'font-size:11.5pt;color:#222222'> 






style=3D'font-size:11.5pt;color:#222222'> 






style=3D'font-size:11.5pt;color:#222222'> 






style=3D'font-size:11.5pt;color:#222222'>


PS- If you no longer wish to receive emails from us, kindly reply to =

this email

with the subject line 
style=3D'font-size:11.5pt;color:red'>"REMOVE"

or "UNSUBSCRIBE,"

style=3D'font-size:11.5pt;color:#222222'> and

we will promptly remove your email address from our mailing list. Please =

allow

up to 48 hours for the changes to take effect.





 





 

















------=_NextPart_000_759A_01DC6471.B59A90C0--



Web/SEO/App Spam from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 03 Dec 2025 08:08:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vQoSJ-00000000GBh-20FJ

for dave@doctor.nl2k.ab.ca;

Wed, 03 Dec 2025 08:07:47 -0700

Resent-From: The Doctor

Resent-Date: Wed, 3 Dec 2025 08:07:47 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f68.google.com ([209.85.216.68]:42297)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vQkYv-00000000PMv-1bqI

for sales@nk.ca;

Wed, 03 Dec 2025 03:58:30 -0700

Received: by mail-pj1-f68.google.com with SMTP id 98e67ed59e1d1-343514c7854so505787a91.1

for ; Wed, 03 Dec 2025 02:57:34 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=affiwebtech.com; s=google; t=1764759448; x=1765364248; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=xmKCf/slR7tl/XYhlWj17mr67AYRWU8/jOiZsiRLX7Y=;

b=DTLfTySwb8gvdd/6ABqb4e3sIoYjSRffOd9DcoYsSC9Ds/TjICJnW6pkEWYaDVZ0qq

jP0ZgOn6F/MicsSq9KmfXM+Mguy8+ZHCpt4dq8Oz1QoidNlRgCwAYnXGMY9omjqvDemP

awMZm7e9PJJpOP77hi7jojrGRqylL2YHOVwFyK5AMQAbO6LngEYDCN1WwQy9ZtjH+tgF

pQRcfHsgMoMdhZ9rjpO26UolqsEF4zLp+YpAJHPPYAnC9ezxGyYU6LkOI3/W5NkJjnkr

p3iQq0AQ9m7PCJjY9IZqo6KhkNQJpxFLmLmKJlGATSN1wyTobM/jObrlg/PVCdUCwDaz

yeKg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1764759448; x=1765364248;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=xmKCf/slR7tl/XYhlWj17mr67AYRWU8/jOiZsiRLX7Y=;

b=T5ERHK2B/1Nxu/BQbX9JvxNSas435Nvcx9eiZ2pXGs50yeAf39oUCzGT2pAOF1Ct2m

CW+FqhExXJRoDidppV2lsEnFn6UrBuu9JroVj369f/ASIfM78C9fKnu2tfQy/izRlmkm

S3OJNyVgBhnXX1ik5NHGbKvyJQs3JftF/Yp7P0uxmGHgMWrPERdIkURV7M9iyqmf/j2D

dppkOT8T8N+AvWRaFilUYIlG/ZWLutxOtWtDzCFGDSYj8U7LEjXd+CgGwIy/Vm4x+2vp

cXGs+tqxD/efy3/ITqxX1wtD8H46m19Oismwdj9IiGeC0j10qqo7KqHFuR9k8+mLiE1o

ugdA==

X-Gm-Message-State: AOJu0YzUA7U9N9AXGIrVpHIcDJxVG9H+Xdfems9g4XQIYYvks76p9gXc

DBMqZB3cFNoFkXd9Rf/CzUHv9SzJ8FMpOfZ7Y0J87RBrQ2y73xoKV7RVUqSUDPuGkn6on0aSWXc

sCw9gYeU=

X-Gm-Gg: ASbGnctAaJxyaap6Nt+1UsilDP/f9KcCszWDzxUI/+XrsuDfslPgeyqjRahbVLWWQK2

WXgzSMTg8C5neVVnbkmhO+RV+CkEkT071qdCEZEG+ecAOjD53LvghzsNmwtD2sqRv9p8pJLUH6e

cvxCVWgFSdP6+lhw1asrymLUV9e01ykh7kKr5vuxu6Bxsr3MQi/qKrvUujn2nJW09r7lyq8gB0U

XeLvRsAf86m5bPfJ0HNHAjPxecnPDDUDc2f9QjJgH8AGn3waOMP7PhjfnA6rBsaCAivptADC3dm

lw5vUZCC0E8lb/LgYkHzeT8IF5hk8giOczItkuKcmWz4GZNF9BM5HMd/jOJU2zqeDFig8YIOZj6

SEpoufS6vmrLFRIsCcZhiHj4u08iirnrTrLutfbW5wdzQ2HoLI7+9pBFN+a7kjhrN4n8jVEmj3i

jQnZAA1+Y/uw5I4RdWPqMLB7zU6ZTcwfdMhs85s3w=

X-Google-Smtp-Source: AGHT+IESspasCa3AtNtL/ojF8sr3jiKNF95thwsKg8/RxkyWEBv1UoWyctYJUerqvxFQmKjQMy8dxw==

X-Received: by 2002:a17:90b:3fce:b0:340:e103:bfd4 with SMTP id 98e67ed59e1d1-349126de9efmr2013885a91.2.1764759448075;

Wed, 03 Dec 2025 02:57:28 -0800 (PST)

Received: from vicPC ([2409:40d0:30ae:a414:4c98:a387:609b:404a])

by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-34910bd6665sm2299450a91.12.2025.12.03.02.57.26

for

(version=TLS1 cipher=ECDHE-ECDSA-AES128-SHA bits=128/128);

Wed, 03 Dec 2025 02:57:27 -0800 (PST)

From: "Mark"

To:

Subject: Website

Date: Wed, 3 Dec 2025 16:08:52 +0530

Message-ID: <759901dc6443$9be254c0$d3a6fe40$@com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_759A_01DC6471.B59A90C0"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdxkM1bfikL75sk1T0+KGcvGxiq6sw==

Content-Language: en-us



This is a multipart message in MIME format.



------=_NextPart_000_759A_01DC6471.B59A90C0

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hello,



Would you be interested in building a new site, or possibly

rebuilding/repairing your existing site: www.nk.ca with the latest added

features? We are a professional Web and App Development company.



I would like to send you my Website Proposal and examples of websites to see

the kind of quality you can expect to receive.



Do let me know if you are interested.



Kind Regards,

Mark,



Sales Team,









































PS- If you no longer wish to receive emails from us, kindly reply to this

email with the subject line "REMOVE" or "UNSUBSCRIBE," and we will promptly

remove your email address from our mailing list. Please allow up to 48 hours

for the changes to take effect.

Compromised account phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 02 Dec 2025 21:10:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vQeBe-000000001OB-2qM0

for dave@doctor.nl2k.ab.ca;

Tue, 02 Dec 2025 21:09:54 -0700

Resent-From: The Doctor

Resent-Date: Tue, 2 Dec 2025 21:09:54 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from outbound-mail03.dca.untd.com ([64.136.47.37]:39602)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vQasD-00000000DjF-0jfx

for root@nk.ca;

Tue, 02 Dec 2025 17:37:48 -0700

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juno.com; s=alpha;

t=1764722198; bh=47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=; l=0;

h=From:Subject:To:Date:Content-Type:Message-Id;

b=U5xd2rzJR62tL61JzstqRSbPLU7+Bx3ZgsXotnCSOyriAwZHKNfy+ONxwxkbCTiDp

WkEcH4MjBRgQR/aUVUQwEMhmFeghATASACn5xH0YDxhkpPdlYXOP0eN4BcAxcpwNJy

3eHrLmaHHVhqKAynY9mlZKe3Dd1YviwtTApAvRas=

Received: from MACBOOKPRO9EF3 ([84.239.43.26])

by smtpout04.dca.untd.com with SMTP id AABWU9BRFAPAWL2S

for (sender );

Tue, 2 Dec 2025 16:35:49 -0800 (PST)

From: "Denise Mack"

Subject: A2 Couple of questions !

To: root@nk.ca

MIME-Version: 1.0

Reply-To: famack91@gmail.com

Date: Tue, 2 Dec 2025 16:35:49 -0800

Content-Type: text/plain

Content-Transfer-Encoding: quoted-printable

Message-Id:

X-UNTD-BPF: 1ad594d49494f49444dd7dc47dc5cdd59d55fd646544c9c9e451c90555ad90a0802985e060c0597405e9d9f0bd7129047569492d74511959a94db14d458d11eded453589

X-Originating-Ip: 84.239.43.26

X-UNTD-BodySize: 87

X-ContentStamp: 1:1:1964241120

X-UNTD-OriginStamp: S2/q5Gcc8EoPTxpzA727b47/CTqZLfe7BHu8IMCs3MFaiA0UOvVxhw==

X-UNTD-Peer-Info: 10.171.42.34|smtpout04.dca.untd.com|smtpout04.dca.untd.com|shaquanna@juno.com

X-Spam_score: 8.0

X-Spam_score_int: 80

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Sorry to bother, do u usually order things on Aamzon.ca, either

on prime? Thank you,



Content analysis details: (8.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[84.239.43.26 listed in will-spam-for-food.eu.org]

[84.239.43.26 listed in will-spam-for-food.eu.org]

[84.239.43.26 listed in will-spam-for-food.eu.org]

[84.239.43.26 listed in will-spam-for-food.eu.org]

[84.239.43.26 listed in will-spam-for-food.eu.org]

[84.239.43.26 listed in will-spam-for-food.eu.org]

[84.239.43.26 listed in will-spam-for-food.eu.org]

[84.239.43.26 listed in will-spam-for-food.eu.org]

[64.136.47.37 listed in will-spam-for-food.eu.org]

[64.136.47.37 listed in will-spam-for-food.eu.org]

[64.136.47.37 listed in will-spam-for-food.eu.org]

[64.136.47.37 listed in will-spam-for-food.eu.org]

[64.136.47.37 listed in will-spam-for-food.eu.org]

[64.136.47.37 listed in will-spam-for-food.eu.org]

[64.136.47.37 listed in will-spam-for-food.eu.org]

[64.136.47.37 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[64.136.47.37 listed in dnsbl.ahbl.org]

[64.136.47.37 listed in dnsbl.ahbl.org]

[64.136.47.37 listed in dnsbl.ahbl.org]

[64.136.47.37 listed in dnsbl.ahbl.org]

[84.239.43.26 listed in dnsbl.ahbl.org]

[84.239.43.26 listed in dnsbl.ahbl.org]

[84.239.43.26 listed in dnsbl.ahbl.org]

[84.239.43.26 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[64.136.47.37 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[64.136.47.37 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[64.136.47.37 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[64.136.47.37 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[84.239.43.26 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low

trust

[64.136.47.37 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[famack91(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[shaquanna(at)juno.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

Subject: {SPAM?} A2 Couple of questions !



Sorry to bother, do u usually order things on Aamzon.ca, either on prime?



Thank you,



Fedex phish Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 02 Dec 2025 15:26:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vQYns-000000006Xz-3EsM

for dave@doctor.nl2k.ab.ca;

Tue, 02 Dec 2025 15:25:00 -0700

Resent-From: The Doctor

Resent-Date: Tue, 2 Dec 2025 15:25:00 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [45.141.234.235] (port=53821 helo=hjxw.net)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

id 1vQXxO-000000003Fx-3YgX

for sales@netknow.ca;

Tue, 02 Dec 2025 14:30:55 -0700

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=netknow.ca;

h=Date:To:From:Subject:Content-Type:Mime-Version; i=sales@netknow.ca;

bh=xwqk9hpA/PKtZXCIg8CW6knQRSc=;

b=Ffd9gxRCfGa4ek+xKmu8TGtza603ktC4ncC6RmpmbWnmI1Q01pmfZNzhUvvJ+6OWn59DIkBt9xuK

1LR83Lea+9DF+vhG8q7BGY2AZmFasdMjSlCG6rdMnvwwMKSFGAhpv36duWbPqTxb5FKPeWS8GZ7t

T0cJs4fTor/motTObE0hTnYEbsBYK/ZD2kLhy8u6vNSEWhFLUqClGN+sH+xbqQOdiTvfewL5u7/A

BSWYaNIHw4S14GQvujsGefsw7XO3xRq577zcFkJR0AwcmtWxtCaPWZqOQHp8onm+5H1ZWVF0Unlx

F5193b7r53oeM5+KWFgHE3+HL9rq9CDkUfVLcw==

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=netknow.ca;

b=ohkQXBWwls3ac9Pr8+6fZEC82eEcd+wbcjZMWkqk3jA9AXD9gPuJlV5j304nAcOiGuFy7hgTY+a3

Ok4VCdI9OI0+cfIlUV7h9xLDlX1cTj+kCSxrfYta3FlJEbG8+BzKFM+xs8vJZzOcX02CNzVsW5cw

bDuNPWx1mTxMfyWvRdgm4O5OeHmRRhaXIlYi50lduSdOe0V7iFNu0LuKOi+hqsEHIaXhHmu8qFjR

dWuhoDWCkLhBnGz8PEPzQmvEaEX1nnGcI7Yqx4eEw+cPGlGl6bg0t5LpM+mPXEZAif5n8gydxhFa

bdKg9XnawZwvNkJ3bCy+++Aq3jt4vPg8to6TwQ==;

Date: Tue, 02 Dec 2025 21:29:12 +0000

To: sales@netknow.ca

From: FedEx Support

Subject: Notification of Lost Package and Reimbursement

Content-Type: text/html; charset="UTF-8"

Mime-Version: 1.0

X-Spam_score: 17.3

X-Spam_score_int: 173

X-Spam_bar: +++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Package Status Update FedEx® ☰ We're Sorry, But Your Package

Appears to Be Missing



Content analysis details: (17.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[45.141.234.235 listed in will-spam-for-food.eu.org]

[45.141.234.235 listed in will-spam-for-food.eu.org]

[45.141.234.235 listed in will-spam-for-food.eu.org]

[45.141.234.235 listed in will-spam-for-food.eu.org]

[45.141.234.235 listed in will-spam-for-food.eu.org]

[45.141.234.235 listed in will-spam-for-food.eu.org]

[45.141.234.235 listed in will-spam-for-food.eu.org]

[45.141.234.235 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[45.141.234.235 listed in dnsbl.ahbl.org]

[45.141.234.235 listed in dnsbl.ahbl.org]

[45.141.234.235 listed in dnsbl.ahbl.org]

[45.141.234.235 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[45.141.234.235 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[45.141.234.235 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[45.141.234.235 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[45.141.234.235 listed in dnsbl.ahbl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: 31.129.22.185]

1.5 HK_SCAM_N8 BODY: No description available.

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HK_SCAM No description available.

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

3.4 DOS_BODY_HIGH_NO_MID High bit body and no message ID header

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.7 TO_EQ_FM_DOM_HTML_ONLY To domain == From domain and HTML only

0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX

0.0 T_STY_INVIS_DIRECT HTML hidden text + direct-to-MX

0.0 TO_EQ_FM_HTML_DIRECT To == From and HTML only, direct-to-MX

Subject: {SPAM?} Notification of Lost Package and Reimbursement




PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">











Package Status Update



Fedex phish Part 2




















style="background-color: #4D148C; padding: 15px 20px; text-align: right; vertical-align: middle;">














style="font-family: Arial, Helvetica, sans-serif; font-size: 24px; font-weight: 900; letter-spacing: -1px; line-height: 1;">

FedEx®




















style="background-color: #ffffff; border-bottom-left-radius: 8px; border-bottom-right-radius: 8px; box-shadow: 0 2px 5px rgba(0,0,0,0.1);">















We're Sorry, But Your Package
Appears to Be Missing












style="margin: 0 auto;">






















style="border: 1px solid #A07855; border-radius: 4px;">




style="width: 100%; height: 1px; background-color: #dfbd99; margin-top: 15px;">




style="width: 20px; height: 14px; background-color: #dfbd99; margin: 0 auto;">




style="width: 20px; height: 39px; background-color: #cbb399; margin: 0 auto;">










style="margin-left: -15px; margin-bottom: 20px; width: 30px; height: 30px; background-color: #FF0055; border-radius: 50%; border: 2px solid #ffffff; color: #ffffff; font-weight: bold; font-family: Arial, sans-serif; font-size: 20px; line-height: 30px; text-align: center;">

!











We understand this is frustrating, and we're doing everything we can to

investigate what happened.








style="text-align: left; background-color: #fafafa; padding: 15px; border-radius: 5px;">


style="color: #000000; font-weight: bold; margin-bottom: 15px; margin-top: 0;">

Your original tracking information:







Thursday 20 November

2025









Your package was picked up


- Tracking Code: AIPD-1512-KL10







Sunday 23 November

2025









Package on hold




style="color: #555555; font-size: 14px; padding-left: 14px; margin-top: 5px; line-height: 1.4;">

- After this point, we unfortunately lost track of your package.










style="color: #333333; font-size: 15px; line-height: 1.5; margin-top: 30px; font-weight: bold;">

We value your time and want to make things right. As an apology, we'd like to

offer you a compensation product up to $100 in value.















Get Your Compensation Now ›



























You received this email because you have a shipment associated with your email address.





Unsubscribe |

Privacy Policy |

Customer Support





© 2025 FepEx. All rights reserved.





















Fedex Phish Part 3








style="margin: 0 auto;">






















style="border: 1px solid #A07855; border-radius: 4px;">




style="width: 100%; height: 1px; background-color: #dfbd99; margin-top: 15px;">




style="width: 20px; height: 14px; background-color: #dfbd99; margin: 0 auto;">




style="width: 20px; height: 39px; background-color: #cbb399; margin: 0 auto;">










style="margin-left: -15px; margin-bottom: 20px; width: 30px; height: 30px; background-color: #FF0055; border-radius: 50%; border: 2px solid #ffffff; color: #ffffff; font-weight: bold; font-family: Arial, sans-serif; font-size: 20px; line-height: 30px; text-align: center;">

!











We understand this is frustrating, and we're doing everything we can to

investigate what happened.








style="text-align: left; background-color: #fafafa; padding: 15px; border-radius: 5px;">


style="color: #000000; font-weight: bold; margin-bottom: 15px; margin-top: 0;">

Your original tracking information:







Thursday 20 November

2025









Your package was picked up


- Tracking Code: AIPD-1512-KL10







Sunday 23 November

2025









Package on hold




style="color: #555555; font-size: 14px; padding-left: 14px; margin-top: 5px; line-height: 1.4;">

- After this point, we unfortunately lost track of your package.










style="color: #333333; font-size: 15px; line-height: 1.5; margin-top: 30px; font-weight: bold;">

We value your time and want to make things right. As an apology, we'd like to

offer you a compensation product up to $100 in value.















Get Your Compensation Now ›



































You received this email because you have a shipment associated with your email address.





Unsubscribe |

Privacy Policy |

Customer Support





© 2025 FepEx. All rights reserved.





















Fedex Phish Part 2


PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">











Package Status Update
























style="background-color: #4D148C; padding: 15px 20px; text-align: right; vertical-align: middle;">














style="font-family: Arial, Helvetica, sans-serif; font-size: 24px; font-weight: 900; letter-spacing: -1px; line-height: 1;">

FedEx®
















style="background-color: #ffffff; border-bottom-left-radius: 8px; border-bottom-right-radius: 8px; box-shadow: 0 2px 5px rgba(0,0,0,0.1);">











We're Sorry, But Your Package
Appears to Be Missing

Fedex Phish Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 02 Dec 2025 15:25:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vQYnn-000000006XL-3Jbp

for dave@doctor.nl2k.ab.ca;

Tue, 02 Dec 2025 15:24:55 -0700

Resent-From: The Doctor

Resent-Date: Tue, 2 Dec 2025 15:24:55 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [45.141.234.235] (port=49435 helo=hjxw.net)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

id 1vQXwO-000000003DP-0E7e

for root@nk.ca;

Tue, 02 Dec 2025 14:29:52 -0700

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=nk.ca;

h=Date:To:From:Subject:Content-Type:Mime-Version; i=root@nk.ca;

bh=WYdPo/LbHBgJPeSJQgtEBRkmBZw=;

b=BzmIyMecTfc55DQvOzMT5ipjLVyGaCAP4Xwa7RZIY51XtIFp46aDvuCmIVWuaZ80TK+8odjhNFRL

X7KmOMBI10fcXPe67TpV6lChAyJ3mCkbrVmWadHAW5VKjkxKLo24Yh5ES8JZ880OJXMlAOcEW5Gx

o57GQVFxZrExUEM77MMaQbojHIvOFPndA1vrK3ECed4zctH7efffdAUAgxl+ku1sNFYy6BQLx7Ra

b9sGtGm+2hPds2gh7EM/CBSPAS0/hxUD5CMbrmANbYg2aA0N0G+zQZ6SdpB7IEITDdeFbZRlqsXe

+JelbmkM6eKCn7qjSubyNcJMjUzjnNSYE95tCg==

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=nk.ca;

b=oYioa13q+NLyZe/LXisxhFcmQH6fK29Nz7SLj4vyGFq1UQIME+DBhepDwbo2vCmaQUVcCWPSFu5Z

J4qQBD4MJX47gLhH5ciNiFAm3UBEx72q3tHG+7fuFuBgY8M04+ddD2GvFqHS7QIJ0KG6wjvybPBR

NipW7fAiCeGLei2tbppblCXS9FjcSOe/iGoarXJdWPK56eksAE6/ZizOCLP+mLs+9i/YafuZ8kfS

va0IafCGSPpdzq7EctV3DRcvGrH7ZKDoRK2YFWw/HeqsojiFLLvQuZzb9/UTfNJvgbj4e+kUczC4

m2o/OXtsdA2cpSd7q3xhhjGXnTJCzvp4RTi+lg==;

Date: Tue, 02 Dec 2025 21:28:49 +0000

To: root@nk.ca

From: FedEx Support

Subject: Notification of Lost Package and Reimbursement

Content-Type: text/html; charset="UTF-8"

Mime-Version: 1.0

X-Spam_score: 12.8

X-Spam_score_int: 128

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Package Status Update FedEx® ☰ We're Sorry, But Your Package

Appears to Be Missing



Content analysis details: (12.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[45.141.234.235 listed in will-spam-for-food.eu.org]

[45.141.234.235 listed in will-spam-for-food.eu.org]

[45.141.234.235 listed in will-spam-for-food.eu.org]

[45.141.234.235 listed in will-spam-for-food.eu.org]

[45.141.234.235 listed in will-spam-for-food.eu.org]

[45.141.234.235 listed in will-spam-for-food.eu.org]

[45.141.234.235 listed in will-spam-for-food.eu.org]

[45.141.234.235 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[45.141.234.235 listed in dnsbl.ahbl.org]

[45.141.234.235 listed in dnsbl.ahbl.org]

[45.141.234.235 listed in dnsbl.ahbl.org]

[45.141.234.235 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[45.141.234.235 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[45.141.234.235 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[45.141.234.235 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[45.141.234.235 listed in dnsbl.ahbl.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: 31.129.22.185]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[45.141.234.235 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[45.141.234.235 listed in sa-trusted.bondedsender.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

1.5 HK_SCAM_N8 BODY: No description available.

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[45.141.234.235 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[45.141.234.235 listed in bl.score.senderscore.com]

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

3.4 DOS_BODY_HIGH_NO_MID High bit body and no message ID header

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 HK_SCAM No description available.

0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX

0.0 TO_EQ_FM_HTML_DIRECT To == From and HTML only, direct-to-MX

1.7 TO_EQ_FM_DOM_HTML_ONLY To domain == From domain and HTML only

0.0 T_STY_INVIS_DIRECT HTML hidden text + direct-to-MX

Subject: {SPAM?} Notification of Lost Package and Reimbursement

Web/SEO/App Spam from Microsoft Outlook Part 4



--_000_TYUPR01MB530768854535D5A830679CF9C3D8ATYUPR01MB5307apcp_

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64



PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i

dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxzdHlsZSB0eXBlPSJ0ZXh0L2NzcyIgc3R5bGU9

ImRpc3BsYXk6bm9uZTsiPiBQIHttYXJnaW4tdG9wOjA7bWFyZ2luLWJvdHRvbTowO30gPC9zdHls

ZT4NCjwvaGVhZD4NCjxib2R5IGRpcj0ibHRyIj4NCjxkaXYgc3R5bGU9ImZvbnQtZmFtaWx5OiBB

cHRvcywgQXB0b3NfRW1iZWRkZWRGb250LCBBcHRvc19NU0ZvbnRTZXJ2aWNlLCBDYWxpYnJpLCBI

ZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IGZvbnQtc2l6ZTogMTJwdDsgY29sb3I6IHJnYigwLCAwLCAw

KTsiIGNsYXNzPSJlbGVtZW50VG9Qcm9vZiI+DQpIaSw8L2Rpdj4NCjxkaXYgc3R5bGU9ImRpcmVj

dGlvbjogbHRyOyB0ZXh0LWFsaWduOiBsZWZ0OyB0ZXh0LWluZGVudDogMHB4OyBiYWNrZ3JvdW5k

LWNvbG9yOiByZ2IoMjU1LCAyNTUsIDI1NSk7IG1hcmdpbjogMHB4OyBmb250LWZhbWlseTogQXB0

b3MsIEFwdG9zX0VtYmVkZGVkRm9udCwgQXB0b3NfTVNGb250U2VydmljZSwgQ2FsaWJyaSwgSGVs

dmV0aWNhLCBzYW5zLXNlcmlmOyBmb250LXNpemU6IDEycHQ7IGNvbG9yOiByZ2IoMCwgMCwgMCk7

Ij4NCjxicj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0iZGlyZWN0aW9uOiBsdHI7IHRleHQtYWxpZ246

IGxlZnQ7IHRleHQtaW5kZW50OiAwcHg7IGJhY2tncm91bmQtY29sb3I6IHJnYigyNTUsIDI1NSwg

MjU1KTsgbWFyZ2luOiAwcHg7IGZvbnQtZmFtaWx5OiBBcHRvcywgQXB0b3NfRW1iZWRkZWRGb250

LCBBcHRvc19NU0ZvbnRTZXJ2aWNlLCBDYWxpYnJpLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IGZv

bnQtc2l6ZTogMTJwdDsgY29sb3I6IHJnYigwLCAwLCAwKTsiPg0KSG9wZSB5b3XigJlyZSBkb2lu

ZyB3ZWxsLjwvZGl2Pg0KPGRpdiBzdHlsZT0iZGlyZWN0aW9uOiBsdHI7IHRleHQtYWxpZ246IGxl

ZnQ7IHRleHQtaW5kZW50OiAwcHg7IGJhY2tncm91bmQtY29sb3I6IHJnYigyNTUsIDI1NSwgMjU1

KTsgbWFyZ2luOiAwcHg7IGZvbnQtZmFtaWx5OiBBcHRvcywgQXB0b3NfRW1iZWRkZWRGb250LCBB

cHRvc19NU0ZvbnRTZXJ2aWNlLCBDYWxpYnJpLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IGZvbnQt

c2l6ZTogMTJwdDsgY29sb3I6IHJnYigwLCAwLCAwKTsiPg0KPGJyPg0KPC9kaXY+DQo8ZGl2IHN0

eWxlPSJkaXJlY3Rpb246IGx0cjsgdGV4dC1hbGlnbjogbGVmdDsgdGV4dC1pbmRlbnQ6IDBweDsg

YmFja2dyb3VuZC1jb2xvcjogcmdiKDI1NSwgMjU1LCAyNTUpOyBtYXJnaW46IDBweDsgZm9udC1m

YW1pbHk6IEFwdG9zLCBBcHRvc19FbWJlZGRlZEZvbnQsIEFwdG9zX01TRm9udFNlcnZpY2UsIENh

bGlicmksIEhlbHZldGljYSwgc2Fucy1zZXJpZjsgZm9udC1zaXplOiAxMnB0OyBjb2xvcjogcmdi

KDAsIDAsIDApOyI+DQo8Yj5TaG91bGQgSSBzZW5kIHRoZSBTRU8gcHJpY2luZyBhbmQgc2Vhc29u

YWwgb2ZmZXI/PC9iPjwvZGl2Pg0KPGRpdiBzdHlsZT0iZGlyZWN0aW9uOiBsdHI7IHRleHQtYWxp

Z246IGxlZnQ7IHRleHQtaW5kZW50OiAwcHg7IGJhY2tncm91bmQtY29sb3I6IHJnYigyNTUsIDI1

NSwgMjU1KTsgbWFyZ2luOiAwcHg7IGZvbnQtZmFtaWx5OiBBcHRvcywgQXB0b3NfRW1iZWRkZWRG

b250LCBBcHRvc19NU0ZvbnRTZXJ2aWNlLCBDYWxpYnJpLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7

IGZvbnQtc2l6ZTogMTJwdDsgY29sb3I6IHJnYigwLCAwLCAwKTsiPg0KPGJyPg0KPC9kaXY+DQo8

ZGl2IHN0eWxlPSJkaXJlY3Rpb246IGx0cjsgdGV4dC1hbGlnbjogbGVmdDsgdGV4dC1pbmRlbnQ6

IDBweDsgYmFja2dyb3VuZC1jb2xvcjogcmdiKDI1NSwgMjU1LCAyNTUpOyBtYXJnaW46IDBweDsg

Zm9udC1mYW1pbHk6IEFwdG9zLCBBcHRvc19FbWJlZGRlZEZvbnQsIEFwdG9zX01TRm9udFNlcnZp

Y2UsIENhbGlicmksIEhlbHZldGljYSwgc2Fucy1zZXJpZjsgZm9udC1zaXplOiAxMnB0OyBjb2xv

cjogcmdiKDAsIDAsIDApOyI+DQpUaGFua3M8L2Rpdj4NCjxwIHN0eWxlPSJkaXJlY3Rpb246IGx0

cjsgbWFyZ2luOiAwY20gMGNtIDAuMDAwMXB0OyBmb250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3

IFJvbWFuJnF1b3Q7LCAmcXVvdDtzZXJpZiZxdW90OzsgZm9udC1zaXplOiAxMnB0OyI+DQo8c3Bh

biBzdHlsZT0iZm9udC1mYW1pbHk6IENhbWJyaWEsICZxdW90O3NlcmlmJnF1b3Q7OyI+PGJyPg0K

PC9zcGFuPjwvcD4NCjxwIHN0eWxlPSJkaXJlY3Rpb246IGx0cjsgbWFyZ2luOiAwY20gMGNtIDAu

MDAwMXB0OyBmb250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCAmcXVvdDtz

ZXJpZiZxdW90OzsgZm9udC1zaXplOiAxMnB0OyI+DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6

IENhbWJyaWEsICZxdW90O3NlcmlmJnF1b3Q7OyI+Jm5ic3A7PC9zcGFuPjwvcD4NCjxwIHN0eWxl

PSJkaXJlY3Rpb246IGx0cjsgbWFyZ2luOiAwY20gMGNtIDAuMDAwMXB0OyBmb250LWZhbWlseTog

JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCAmcXVvdDtzZXJpZiZxdW90OzsgZm9udC1zaXpl

OiAxMnB0OyI+DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IENhbWJyaWEsICZxdW90O3Nlcmlm

JnF1b3Q7OyI+T24gT2N0IDEwLCAyMDI0LCBhdCAxMjo0NOKAr1BNLCBSZWNoYXJkICZsdDtSZWNo

YXJkYjA1QGhvdG1haWwuY29tJmd0OyB3cm90ZTo8L3NwYW4+PC9wPg0KPHAgc3R5bGU9ImRpcmVj

dGlvbjogbHRyOyBtYXJnaW46IDBjbSAwY20gMC4wMDAxcHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtU

aW1lcyBOZXcgUm9tYW4mcXVvdDssICZxdW90O3NlcmlmJnF1b3Q7OyBmb250LXNpemU6IDEycHQ7

Ij4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogQ2FtYnJpYSwgJnF1b3Q7c2VyaWYmcXVvdDs7

Ij4mbmJzcDs8L3NwYW4+PC9wPg0KPHAgc3R5bGU9ImRpcmVjdGlvbjogbHRyOyB0ZXh0LWFsaWdu

OiBsZWZ0OyB0ZXh0LWluZGVudDogMHB4OyBsaW5lLWhlaWdodDogbm9ybWFsOyBiYWNrZ3JvdW5k

LWNvbG9yOiByZ2IoMjU1LCAyNTUsIDI1NSk7IG1hcmdpbjogMHB4OyI+DQo8c3BhbiBzdHlsZT0i

Zm9udC1mYW1pbHk6IEFwdG9zLCBBcHRvc19FbWJlZGRlZEZvbnQsIEFwdG9zX01TRm9udFNlcnZp

Y2UsIENhbGlicmksIEhlbHZldGljYSwgc2Fucy1zZXJpZjsgZm9udC1zaXplOiAxMnB0OyBjb2xv

cjogcmdiKDAsIDAsIDApOyI+SGksPC9zcGFuPjwvcD4NCjxkaXYgc3R5bGU9ImRpcmVjdGlvbjog

bHRyOyB0ZXh0LWFsaWduOiBsZWZ0OyB0ZXh0LWluZGVudDogMHB4OyBiYWNrZ3JvdW5kLWNvbG9y

OiByZ2IoMjU1LCAyNTUsIDI1NSk7IG1hcmdpbjogMHB4OyBmb250LWZhbWlseTogQXB0b3MsIEFw

dG9zX0VtYmVkZGVkRm9udCwgQXB0b3NfTVNGb250U2VydmljZSwgQ2FsaWJyaSwgSGVsdmV0aWNh

LCBzYW5zLXNlcmlmOyBmb250LXNpemU6IDEycHQ7IGNvbG9yOiByZ2IoMCwgMCwgMCk7Ij4NCjxi

cj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0iZGlyZWN0aW9uOiBsdHI7IHRleHQtYWxpZ246IGxlZnQ7

IHRleHQtaW5kZW50OiAwcHg7IGJhY2tncm91bmQtY29sb3I6IHJnYigyNTUsIDI1NSwgMjU1KTsg

bWFyZ2luOiAwcHg7IGZvbnQtZmFtaWx5OiBBcHRvcywgQXB0b3NfRW1iZWRkZWRGb250LCBBcHRv

c19NU0ZvbnRTZXJ2aWNlLCBDYWxpYnJpLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IGZvbnQtc2l6

ZTogMTJwdDsgY29sb3I6IHJnYigwLCAwLCAwKTsiPg0KV2UgY2FuIGhlbHAgeW91IGdldCBtb3Jl

IHRhcmdldGVkIHRyYWZmaWMgYW5kIHNlY3VyZTxiPiZuYnNwO2ZpcnN0LXBhZ2UgcG9zaXRpb25z

IG9uIEdvb2dsZS48L2I+PC9kaXY+DQo8ZGl2IHN0eWxlPSJkaXJlY3Rpb246IGx0cjsgdGV4dC1h

bGlnbjogbGVmdDsgdGV4dC1pbmRlbnQ6IDBweDsgYmFja2dyb3VuZC1jb2xvcjogcmdiKDI1NSwg

MjU1LCAyNTUpOyBtYXJnaW46IDBweDsgZm9udC1mYW1pbHk6IEFwdG9zLCBBcHRvc19FbWJlZGRl

ZEZvbnQsIEFwdG9zX01TRm9udFNlcnZpY2UsIENhbGlicmksIEhlbHZldGljYSwgc2Fucy1zZXJp

ZjsgZm9udC1zaXplOiAxMnB0OyBjb2xvcjogcmdiKDAsIDAsIDApOyI+DQo8YnI+DQo8L2Rpdj4N

CjxkaXYgc3R5bGU9ImRpcmVjdGlvbjogbHRyOyB0ZXh0LWFsaWduOiBsZWZ0OyB0ZXh0LWluZGVu

dDogMHB4OyBiYWNrZ3JvdW5kLWNvbG9yOiByZ2IoMjU1LCAyNTUsIDI1NSk7IG1hcmdpbjogMHB4

OyBmb250LWZhbWlseTogQXB0b3MsIEFwdG9zX0VtYmVkZGVkRm9udCwgQXB0b3NfTVNGb250U2Vy

dmljZSwgQ2FsaWJyaSwgSGVsdmV0aWNhLCBzYW5zLXNlcmlmOyBmb250LXNpemU6IDEycHQ7IGNv

bG9yOiByZ2IoMCwgMCwgMCk7Ij4NCldlIGFsc28gaGF2ZSBhIDxiPnNwZWNpYWwgb2ZmZXIgYXZh

aWxhYmxlIHRoaXMgc2Vhc29uIDwvYj50aGF0IHlvdSBtYXkgZmluZCB2YWx1YWJsZS48L2Rpdj4N

CjxkaXYgc3R5bGU9ImRpcmVjdGlvbjogbHRyOyB0ZXh0LWFsaWduOiBsZWZ0OyB0ZXh0LWluZGVu

dDogMHB4OyBiYWNrZ3JvdW5kLWNvbG9yOiByZ2IoMjU1LCAyNTUsIDI1NSk7IG1hcmdpbjogMHB4

OyBmb250LWZhbWlseTogQXB0b3MsIEFwdG9zX0VtYmVkZGVkRm9udCwgQXB0b3NfTVNGb250U2Vy

dmljZSwgQ2FsaWJyaSwgSGVsdmV0aWNhLCBzYW5zLXNlcmlmOyBmb250LXNpemU6IDEycHQ7IGNv

bG9yOiByZ2IoMCwgMCwgMCk7Ij4NCjxicj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0iZGlyZWN0aW9u

OiBsdHI7IHRleHQtYWxpZ246IGxlZnQ7IHRleHQtaW5kZW50OiAwcHg7IGJhY2tncm91bmQtY29s

b3I6IHJnYigyNTUsIDI1NSwgMjU1KTsgbWFyZ2luOiAwcHg7IGZvbnQtZmFtaWx5OiBBcHRvcywg

QXB0b3NfRW1iZWRkZWRGb250LCBBcHRvc19NU0ZvbnRTZXJ2aWNlLCBDYWxpYnJpLCBIZWx2ZXRp

Y2EsIHNhbnMtc2VyaWY7IGZvbnQtc2l6ZTogMTJwdDsgY29sb3I6IHJnYigwLCAwLCAwKTsiPg0K

PHNwYW4gc3R5bGU9ImJhY2tncm91bmQtY29sb3I6IHJnYigyNTUsIDI1NSwgMCk7Ij5DYW4gSSBz

ZW5kIHlvdSBvdXIgcHJpY2luZyBkZXRhaWxzPzwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9ImRp

cmVjdGlvbjogbHRyOyB0ZXh0LWFsaWduOiBsZWZ0OyB0ZXh0LWluZGVudDogMHB4OyBsaW5lLWhl

aWdodDogbm9ybWFsOyBiYWNrZ3JvdW5kLWNvbG9yOiByZ2IoMjU1LCAyNTUsIDI1NSk7IG1hcmdp

bjogMHB4OyBmb250LWZhbWlseTogQ2FsaWJyaSwgSGVsdmV0aWNhLCBzYW5zLXNlcmlmOyBmb250

LXNpemU6IDEycHQ7IGNvbG9yOiByZ2IoMzQsIDM0LCAzNCk7Ij4NCjxicj4NCjwvZGl2Pg0KPGRp

diBzdHlsZT0iZGlyZWN0aW9uOiBsdHI7IHRleHQtYWxpZ246IGxlZnQ7IHRleHQtaW5kZW50OiAw

cHg7IGJhY2tncm91bmQtY29sb3I6IHJnYigyNTUsIDI1NSwgMjU1KTsgbWFyZ2luOiAwcHg7IGZv

bnQtZmFtaWx5OiBDYWxpYnJpLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IGZvbnQtc2l6ZTogMTJw

dDsgY29sb3I6IHJnYigzNCwgMzQsIDM0KTsiPg0KQmVzdCw8L2Rpdj4NCjxkaXYgc3R5bGU9ImRp

cmVjdGlvbjogbHRyOyB0ZXh0LWFsaWduOiBsZWZ0OyB0ZXh0LWluZGVudDogMHB4OyBiYWNrZ3Jv

dW5kLWNvbG9yOiByZ2IoMjU1LCAyNTUsIDI1NSk7IG1hcmdpbjogMHB4OyBmb250LWZhbWlseTog

Q2FsaWJyaSwgSGVsdmV0aWNhLCBzYW5zLXNlcmlmOyBmb250LXNpemU6IDEycHQ7IGNvbG9yOiBy

Z2IoMzQsIDM0LCAzNCk7Ij4NClJlY2hhcmQ8L2Rpdj4NCjxkaXYgc3R5bGU9ImRpcmVjdGlvbjog

bHRyOyB0ZXh0LWFsaWduOiBsZWZ0OyB0ZXh0LWluZGVudDogMHB4OyBtYXJnaW46IDBpbiAwaW4g

MC4wMDAxcHQ7IGZvbnQtZmFtaWx5OiBDYW1icmlhLCAmcXVvdDtzZXJpZiZxdW90OzsgZm9udC1z

aXplOiAxMnB0OyBjb2xvcjogcmdiKDAsIDAsIDApOyI+DQo8YnI+DQo8L2Rpdj4NCjwvYm9keT4N

CjwvaHRtbD4NCg==



--_000_TYUPR01MB530768854535D5A830679CF9C3D8ATYUPR01MB5307apcp_--

Web/SEO/App Spam from Microsoft Outlook Part 4



1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.43.74 listed in dnsbl.ahbl.org]

[52.103.43.74 listed in dnsbl.ahbl.org]

[52.103.43.74 listed in dnsbl.ahbl.org]

[52.103.43.74 listed in dnsbl.ahbl.org]

[2603:1096:400:350:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:1096:400:350:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:1096:400:350:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:1096:400:350:0:0:0:14 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.43.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.43.74 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.43.74 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.43.74 listed in dnsbl.ahbl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.43.74 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_VALID Message has a valid ARC signature

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[rechardb05(at)hotmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[rechardb05(at)hotmail.com]

0.3 OFFER_2 BODY: Offers you Something (2)

0.3 SPECIAL_OFFER BODY: Special Offer

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

1.0 MR_DIFF_MID No description available.

Subject: {SPAM?} Re: Improve Your Website Reach ~~



--_000_TYUPR01MB530768854535D5A830679CF9C3D8ATYUPR01MB5307apcp_

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: base64



SGksDQoNCkhvcGUgeW914oCZcmUgZG9pbmcgd2VsbC4NCg0KU2hvdWxkIEkgc2VuZCB0aGUgU0VP

IHByaWNpbmcgYW5kIHNlYXNvbmFsIG9mZmVyPw0KDQpUaGFua3MNCg0KDQoNCg0KT24gT2N0IDEw

LCAyMDI0LCBhdCAxMjo0NOKAr1BNLCBSZWNoYXJkIDxSZWNoYXJkYjA1QGhvdG1haWwuY29tPiB3

cm90ZToNCg0KDQoNCkhpLA0KDQpXZSBjYW4gaGVscCB5b3UgZ2V0IG1vcmUgdGFyZ2V0ZWQgdHJh

ZmZpYyBhbmQgc2VjdXJlIGZpcnN0LXBhZ2UgcG9zaXRpb25zIG9uIEdvb2dsZS4NCg0KV2UgYWxz

byBoYXZlIGEgc3BlY2lhbCBvZmZlciBhdmFpbGFibGUgdGhpcyBzZWFzb24gdGhhdCB5b3UgbWF5

IGZpbmQgdmFsdWFibGUuDQoNCkNhbiBJIHNlbmQgeW91IG91ciBwcmljaW5nIGRldGFpbHM/DQoN

CkJlc3QsDQpSZWNoYXJkDQoNCg==

Web/SEO/App Spam from Microsoft Outlook Part 3



=?utf-8?B?REQ3NXEwaklkUTllaEJRZ082eDdMM0R5Qng5T1NIN3lqb2c2QnVMdFppYmM5?=

=?utf-8?B?NncrZGdUSStHMlZSTlFjVWpnQXRhUzRReElGaHJJc2tDanVoT3lHeEZYWnZB?=

=?utf-8?B?d3RDaVdMNDVDU2lVWFZIb0NsS0tJaUVMZ1AvTGZmTndTV3dyUEtCYUV3ZVE0?=

=?utf-8?B?SVF4S0Y0TzBCdnNSWE5GRmkwMGt3RWw0R1lsUllOS3JhQTNQNysvdHZiUlU2?=

=?utf-8?B?L2hxb1p2Nm5jVWtBZFZFNklxK25lZ25VWmgyclMzT0pRSWc3dzJHMk9SQWl6?=

=?utf-8?B?T0dKVE5UOXhzS0ZVckM2SXdxeTJsVS9uTWIwMkU1OHhQT1puMzBMNTZCakI2?=

=?utf-8?B?NE5HNFZoa3lib0x3cjJDeWhKeHdSTFd2V3NKYndHU2lzKzBJbEpVRzFSN0F0?=

=?utf-8?B?RWlZRXZBcGFaQlJFZjk1dUFNWjJBbm9ENXM0WVYwVTlJNlVpd1RMYm9NM1po?=

=?utf-8?B?UVJsR29jZzlGQUV1TmZVWUpmNFo3cnFyMWtrWHR4R2FVSjdWVVJuTjdVa0Fz?=

=?utf-8?B?WUUvMXdaZUYrSnJaZmNDRi92Ukx5Mk43T0ZVZVBscmYrczV4d1N2WS9Ld1B4?=

=?utf-8?B?YXNzRTd5UmovdjVDekhLVU56TFhjeGpQaG1rRXBoTHNLRG1Ob3JDcy93T09j?=

=?utf-8?B?cmpsNkdJNi9XUmNHbms0dz09?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?utf-8?B?TFhLU2Y1S0l1ZmZTbGtBeDh3dDF6SGV5azBIYlM0WjQ5dWxVd3ZOZzRQRk8v?=

=?utf-8?B?UGFpTEFTZTFoZXljZlErVXFpK1lVOENDbjVuU2cxTXFBRnNoenpxaFRjbHoz?=

=?utf-8?B?RVFCVWd0Q3E2b3BldXVCZHN4QTcycS9rZzB0UnQ2S09xZHR5WGxEZ05QUlFK?=

=?utf-8?B?Y3pid0lDTFdsejNJc0kxbFNPSytwcXlja0FFMVliVHRacjNUNXdkYzRwbFlH?=

=?utf-8?B?emVFdDlOM0d0NFRUa0RJdmMvdmNJdzNJcGk2UmFMMHEyYks1ZU1UR1lZMUda?=

=?utf-8?B?WjF1WFI5OStlYk9LWVc4YWhMTjlQZ3JqTjEvTzcvN0JzR1NVWDF2d2k2dmJF?=

=?utf-8?B?ek5nRno1aUhlM1FUQy9NdU9oS2lZdE1iSUZhSGlTQU41SFNJYkNYMDI3T2NG?=

=?utf-8?B?TDJaZ25RazZrMEYwZjVHVHFHMlFLWXJXYmxnK2RnWGY5eUg3cVYwSlJMZE9h?=

=?utf-8?B?YkxDbGdUR0NGa1hraUQyM3BwWGNJVjBPRXhmMEsyL0lDQ3RuYnNLMU8wZWtx?=

=?utf-8?B?V2t1SzRXT2YyZ2QyNEpDSnd1dXRDYjZuZ1l3VllzaVdKWE16cFpLRVg0YkZx?=

=?utf-8?B?UFQ3bzJwcUZsNmJoRjhiN081T0w2dkxkWWhmaXZiL3JpQ2hnQkJUNStLWWZh?=

=?utf-8?B?V0loWGNWYVI2OTFwdVY4bG5FWEVsZE5mcmVaOFhBTndTallSK3B3QTlYSGJq?=

=?utf-8?B?ZkMza1JQY1ZrOXA0VWZETlBCUmZwSnBwMFBEM1kvODl0ZVZaTU1adnBhSkdi?=

=?utf-8?B?R202OUhqcUxoRmlUS3RCMSsrY0hKRk9abHk4Wk5xN0hLUnJMbG03WTNTMTRU?=

=?utf-8?B?SlYzTXRONzI0MmNteHRDSkFVRTlRYm9xZlBkTUhPMFJLdTlmUDlGSnU2ZW9u?=

=?utf-8?B?eXZSU3VGdWh1QWlUWlk2M0UvTVk5NmtCckJsVi9sOGlMdFN2eU81bm01Z3Vo?=

=?utf-8?B?VzBLdjFZbFhGTGRXTmlJMzdoc080YkdMdmhQNVgwT3M2d215YXZUcFN3UG5Z?=

=?utf-8?B?ekh2akdYa29yT29BU1JyQnFmbFhQbXFReWJOUEo4THhWSFhJVDZ0YjdDaW9O?=

=?utf-8?B?dU1DanpyWlk5N2hLZHJhcGhmTXZVMGJtSVppU0lLd2J3RG5FSG1SWmJua2xi?=

=?utf-8?B?bldkVXc4ODJnYk0vY0g3N2lEZkFPbEF4WGQrMXdXZVR4c1NtODhXQmlaeDUr?=

=?utf-8?B?Qm9jUnV2L2VCdy9nU2pqa3dqcUtvcTF4ZWtIVTVTdGZLUVJjYndXc0I2Qkhs?=

=?utf-8?B?bGRydTlCRnMzcGZUTkxPSHFScXkySi92TUtUWkk0SjI1SmJnRmZPMVNxekZs?=

=?utf-8?B?RmxQOGxxaXdNQ1hybUI5dUdtVTh3ZkVzN0wwK0tHQ1UwcFJrK2dqUW5xQWZ5?=

=?utf-8?B?cy9GZHJGUUJVdWRJZzRwYVY3WTQyeU1EeTYxOFpRazJWczdlVDBtYVVJd2VW?=

=?utf-8?B?dWFMcXA5Q1hoWkQyYk9FZ3g0TjJlTnEwa1pRYTBRRUFXdkFCVmFsYVV0NTc1?=

=?utf-8?B?a0J4U2Y5RGx4TUFKNXNLLy9RR2VLcXBQL2tBaEhyOURBM01FaHBSd0VBNHIw?=

=?utf-8?B?REpIQnR6QzNxSHRzMjlDMVpvYmU0QmprRTF2dythTy9KSU5MK3FKNXMrTjFT?=

=?utf-8?Q?0/seRPsiFnoPR2SA6jfDumJd2hSLa8hhekjtzIrYYAbo=3D?=

Content-Type: multipart/alternative;

boundary="_000_TYUPR01MB530768854535D5A830679CF9C3D8ATYUPR01MB5307apcp_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9052-0-msonline-outlook-827b9.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYUPR01MB5307.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: a889b67b-0377-4bb4-80b2-08de31d7efcb

X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Dec 2025 19:21:04.3924

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEZPR01MB7678

X-Spam_score: 9.1

X-Spam_score_int: 91

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Hope you’re doing well. Should I send the SEO pricing

and seasonal offer?



Content analysis details: (9.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:400:350:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:350:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:350:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:350:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:350:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:350:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:350:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:350:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[52.103.43.74 listed in will-spam-for-food.eu.org]

[52.103.43.74 listed in will-spam-for-food.eu.org]

[52.103.43.74 listed in will-spam-for-food.eu.org]

[52.103.43.74 listed in will-spam-for-food.eu.org]

[52.103.43.74 listed in will-spam-for-food.eu.org]

[52.103.43.74 listed in will-spam-for-food.eu.org]

[52.103.43.74 listed in will-spam-for-food.eu.org]

[52.103.43.74 listed in will-spam-for-food.eu.org]

Web/SEO/App Spam from Microsoft Outlook part 2







































































































































In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYUPR01MB5307:EE_|SEZPR01MB7678:EE_

x-ms-office365-filtering-correlation-id: a889b67b-0377-4bb4-80b2-08de31d7efcb

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|15030799006|7071999006|8060799015|8062599012|39105399006|461199028|15080799012|31061999003|19110799012|3412199025|440099028|40105399003|39145399003|41105399003|12091999003|102099032|56899033;

x-microsoft-antispam-message-info:

=?utf-8?B?MStxOGNWNmhsRFVkdDcrRnlkVkFhc2gzOHRKSndTWkdPeERjRk9UQmhFSzly?=

=?utf-8?B?SUl1SmlOamF4SlFES1ZLNHdxbHA0OFpOZ0JRT1JIQXo5ZW4yL01nY01OL2No?=

=?utf-8?B?QnBLRHByeXYvTmJrWTVZSHl4WWkwa0UzMTB0Y0hSOTFKeGZ2VVJDREVUSEtS?=

=?utf-8?B?UWFKREtTRGdzMk1yNnIyelpFcndpeHZ1ellXd1Q5aW1iai8rN2NIQS9YWWV4?=

=?utf-8?B?WEl2TVBYRVRmZHUwZXMrQW9tWHg3MjkvWi9mcjljUE5VL1hIbEFrV3BhalNp?=

=?utf-8?B?a0EzVFNyRjFHVitwcXdub0V3cDJlUTNUazlHUzhzT25KZ2hVSytGaHFxSlJY?=

=?utf-8?B?cHA4U0pjanpKUmtrbUtxSEpXMDFJb05lVjR6aml0QStLZmpObUIyWG5BOEZO?=

=?utf-8?B?aUh6OXEzRVp0M0UwL3ZEY0ZuZTdJcTJtZUlOQXR2NUxNeGNVRFgvOG10Z1VT?=

=?utf-8?B?bERXQjhjWkVpbFluUjA1NGNhd045ZnNiNVE3TDZtTGNhRWR0WVhyZG5ZcFdw?=

=?utf-8?B?MCt4M25QZDJzNnZhcUdDaUJFSHU2eVRIdWNEUUQ5NkVyQS9Fa1NVTXhKZWRW?=

=?utf-8?B?eFJ3d3I1OCtvNGFRaVdHNjdBYXo4RjRkVHVQamRDNXhFMUI4NFJxWlhLTkFB?=

=?utf-8?B?aXN1S2JRLzFUWlBLVktyRzJ4TnRJbzIvWHBhQVFPa2crMlovbHlaTGlPVUZk?=

=?utf-8?B?YncwY3R5eUlzNzRxYlVPLzBwZW5KWjV3dExJVmNEQ0NRZk1ES0VkK0J3S1gz?=

=?utf-8?B?bnJwU1BIa2JxR2NjZ1FYVjRZZGFMSnVUU1JQNG53MlpOU0p0WE5DcC94cm1a?=

=?utf-8?B?QTlwTjNpUk9jbnNGY2lzOVlhUy9RS1ZUOGlvUmxQZVdzeUJ6MlhIQ3VYM0xZ?=

=?utf-8?B?V0JIclBJSmtZQlJLMGhqOTJWNm5kQ044cmtLOVlIb3Y4WEg4ZEVmVzVBSngx?=

=?utf-8?B?OHhjSWdldlUyaEh1SFMvL1FvRVNxMVNjVXRIQXVBZ1gwNFpHU2gwcWNwb3Rv?=

=?utf-8?B?dDRWTitDZjZMcVBSZmRvWU1OZWMyaklZQktldUx3SGR2Zzg0YTNZVFBLa1Bk?=

=?utf-8?B?cEVXY0FXazR2UERIUm8wU25STGpBekduR1hTSHhGSXJBYkdTcUhtQWFxVDdW?=

Web/SEO/App Spam from Microsoft Outlook part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 02 Dec 2025 13:03:01 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vQWZi-00000000NjN-3KuS

for dave@doctor.nl2k.ab.ca;

Tue, 02 Dec 2025 13:02:14 -0700

Resent-From: The Doctor

Resent-Date: Tue, 2 Dec 2025 13:02:14 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19013074.outbound.protection.outlook.com ([52.103.43.74]:21486 helo=TYDPR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vQVxR-000000007CK-0sjA

for root@nk.ca;

Tue, 02 Dec 2025 12:22:52 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=PdK5sLpKC6A5gdnwrGT3vIJgl8uILDPw+0k39aV2NuTUGJYlOwgnyMEDxjl/sFH7xqserDh3OV8NtWoYgWHhSnJO509TYaf8d7f6QL1zkcOjxQC5NPk7lIzoldHZwTxVX2oFLgkeKfaIJgHpvUaKEq8I3DAd4CdVLfRwJhsrrA4ggVciTFnQKsRnhAWEJ5TsCa58kdqm+r+5Q2lEIWvEpvI8s7N1du7lmorgoRQww/SOo05PsNccelEjWRHuD7vXvFGHK7FbhPQJRsXbZaevL7YKCEyvWqXnvrj1WxqDPH/XwfQaKgS+BzCvwTc/AiNDQFn+A4087k+25XUe+GZAww==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=7hlrCSM1CX2fNOUeyKX0F8zGqkdXn5JLOaYzAq/YWqc=;

b=YJhFntohxFMF5kwSZ2WubzQonEVm8jy21rFblRbqkWzaLkprtYUTD5zIPghMTEF2KV2IO0YuoThe7w+3MGIveSXgMno/XUOiCW8G5ixuDf7tcN3dtARMK8uWm+zLym0YUfzHIA4Lp4viB1Hd3VN/+tU82Dcv7MDvIA0mYHGU0NXgdCG86f81pHvCpCxJ/TgOO0URiGJWV0AEzE4uKknl8/LyX8uyOVRB7pChAC2DcShuJkCMvnh88Qh6l+9oqwVWWVD8nrwswsz3wAxB75IrE7jktWGq5+FfjeYMjrsvojjAzPQIrvqFnPG2qPMLew7+LUcvNkhbRVVErITPfh+3MQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=7hlrCSM1CX2fNOUeyKX0F8zGqkdXn5JLOaYzAq/YWqc=;

b=pdeGsvG3QnUMRIFsrfdIxBdhCfhTvHSGnZRmu5bbkdoyaKSy+F7y2+jxFEvyKvBH3lW/BiTh12iH+O4qeA1e0OCSpYsoOS9EDpA8VGYZgcT+8NeqWF7acMoLegwRMNlDPOj/utruMz2b7c7RCYZiaoiJ4n2BzywnVrWmzKNkhkIBAewIRh2wiC3ehIJV3xr/VaY8McJh62LFz7NhhREOMTodE/DN8whxKLdE2SnY6oINwYaBV6GpBaS95glcP+VahAXUfguqrkI6Zl0HK0AIEDtsH7yCwbOI0GRC+XCa2PXa8DIeexwNU7H32SO7Nv8+NvyLqKb362H0uzlE7oxEnw==

Received: from TYUPR01MB5307.apcprd01.prod.exchangelabs.com

(2603:1096:400:350::14) by SEZPR01MB7678.apcprd01.prod.exchangelabs.com

(2603:1096:101:2a3::6) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9366.17; Tue, 2 Dec

2025 19:21:05 +0000

Received: from TYUPR01MB5307.apcprd01.prod.exchangelabs.com

([fe80::60a8:9043:3790:7123]) by TYUPR01MB5307.apcprd01.prod.exchangelabs.com

([fe80::60a8:9043:3790:7123%3]) with mapi id 15.20.9366.012; Tue, 2 Dec 2025

19:21:05 +0000

From: Rechard Branson

Subject: Re: Improve Your Website Reach ~~

Thread-Topic: Improve Your Website Reach ~~

Thread-Index: AQHcY8DNcwyQEOI/LEy48ANULDnKrQ==

Date: Tue, 2 Dec 2025 19:21:04 +0000

Message-ID:



References:































































































Web/SEO/App Spam from Google Gmail Part 2

------=_NextPart_000_21C5_01DC63B1.38391AE0

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">

class=3DWordSection1>


style=3D'font-family:"Calibri","sans-serif"'>Hello,

I'm reaching =

out to see if there is anything that would like to create Shopify & =

Wordpress, upgrade, repair, or redesign on your website or Mobile =

App.

I am a web designer/developer that can do just about =

anything you can imagine at very affordable prices.

Let me know =

what you think.

If  you interested.  please send me =

your requirements .

Thank you for your time and =

consideration.

Kind Regards,
Sonam


class=3DMsoNormal> 


class=3DMsoNormal> 


class=3DMsoNormal> 


class=3DMsoNormal>         &=

nbsp;           &n=

bsp;           &nb=

sp;           &nbs=

p;            =

;            =

            &=

nbsp;           &n=

bsp;           &nb=

sp;           &nbs=

p;            =

;            =

            &=

nbsp;           &n=

bsp;           &nb=

sp;           &nbs=

p;            =

;            =

            &=

nbsp;           &n=

bsp;       



------=_NextPart_000_21C5_01DC63B1.38391AE0--

Web/SEO/App Spam from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 02 Dec 2025 08:23:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vQSDS-000000009NK-4Bp6

for dave@doctor.nl2k.ab.ca;

Tue, 02 Dec 2025 08:22:58 -0700

Resent-From: The Doctor

Resent-Date: Tue, 2 Dec 2025 08:22:58 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f196.google.com ([209.85.210.196]:50640)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vQP3U-00000000IYa-2W88

for sales@nk.ca;

Tue, 02 Dec 2025 05:00:38 -0700

Received: by mail-pf1-f196.google.com with SMTP id d2e1a72fcca58-7ba55660769so4563993b3a.1

for ; Tue, 02 Dec 2025 03:59:39 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=webiste-co-uk.20230601.gappssmtp.com; s=20230601; t=1764676773; x=1765281573; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=idxI9lec8KhNaLDkBplcPOKRn4/FtC2htHhA8G6T8xk=;

b=VZLHPQ+Ha0SdIheYb5NznEBYSCjwDPkPvv8mdirTT+ctDZ+tB1IjshRwD5CNrJh5OY

w3N+mm0kYl+lK3y9oXcQdoZyENf/pwPf0xYWGxNXbABlnOtKAK3wqQXdgLMXI0mxtPXI

Y8ZypAcpAh9QOy4ODHLnz3MxNm4RRSLy7Exv6rdSHIXjNCOjH3uh+sxW73pQptNht9HX

oQbGrCZdcD/UIWcMKu4LceXPf1gbs6MIPXz8WMofxChccJmx9QG4rZnsZgJiw/WGhVX0

UeTkStvwdTg8JXnZvwQ7ZjVTB1eOakGWGQYjeEtKyWBZWvF+bEJXBJr5SlKjVkc05XV0

U5eA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1764676773; x=1765281573;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=idxI9lec8KhNaLDkBplcPOKRn4/FtC2htHhA8G6T8xk=;

b=YY6Qu0M3cMrlJ486d5QbTF1sGia3solAOLbk7QOKni8vFeykBVqr8ijjrnO07W7SQw

pUvwymw0ANKhivGdEc47uuuHWSBLwKxc/syU/0yBrOABi49EAGL0TcOPqAM3X32KDTTo

JUd83dI4Lz9xgioCwg+VPZS8Fg8hUfRXoua0plQu9dqUImy9mzpS8QD8SQsyfbV/6G1S

lkgZNtVGCfKBXXUsR87lWhsflja8E2wWramCcrhkey38RJAaF7lcw0gmZMIgJIV4eNbl

pkjRY9dDuC5GsOjlcv7cpiqob+Q5WmctUcwQg0q9Kucyu3jmm4GRWM1ph/d/Tb+/MmVj

YAyQ==

X-Gm-Message-State: AOJu0YzmBSKXk25xF6INEJsNO8C+W+BecQad4dMvmPHpYYkYy2VEEhqE

TZ0Mzsqr481685GwNb8M5JeW38lG/xWHfUlcVB+2FVIGTDYYm/8VWieAwUmlAOG7KRuyqDL58vE

ZNKz3Yhk=

X-Gm-Gg: ASbGnctqkoPcJzET4+9+JhC1b/f9ZpBGox8kU9Ul1c2ZYBCGhYffJCwWlhhIvZfl+KK

rXNBzSZXPVlMiPIKFzvvKhT+Y7cx1DEP1bnH2lN8LN8YhspHrBB8y68Pj7i+96wzpg4gbCyIaPL

Mw0I0SbfMiOyVALPNXr5RPX1NftxB685c3R/rm5EDBnWOUm69u8hPYsf36sPincwe+c3ZHrchp6

IO8YblWjZO/FTIdfAkPTXXOz0FxcOjp9O47eux1e/5PqPe4Kinl/NwcnFVA5aT4qlU+tiFT83uD

60/haR3L3Mjf2P9i1gE5DLlFU+1hIoBioA9LNcGckSdVFzjDaDtSGLCn3qoldAABPVNwdg7WlBM

nZ+sx8oO2eN1bUmbFFSPvOOYK/29AHkR38el3fGAQCgPoss5buzcA9lndeyRe6IEj2olTqbl38T

IA6DIiaNqPMTpcdpoJcTXOpGd1L4ELBPI=

X-Google-Smtp-Source: AGHT+IHwaQewsqyc6ZrOOC8qfpnmNT5ufPcT+4veNThbI6KtiB1CEAfoNSfPdz7Wm4ClHlrxD6zHGw==

X-Received: by 2002:a05:6a00:8d6:b0:7ab:e844:1e76 with SMTP id d2e1a72fcca58-7c58c2b20b5mr38915918b3a.5.1764676772942;

Tue, 02 Dec 2025 03:59:32 -0800 (PST)

Received: from Kanhaiya ([2401:4900:1c62:9395:1958:48a8:a192:496b])

by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-7d15e9c3f23sm16933578b3a.36.2025.12.02.03.59.31

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Tue, 02 Dec 2025 03:59:32 -0800 (PST)

From: "Sonam"

To:

Subject: Designer/Developer

Date: Tue, 2 Dec 2025 17:22:42 +0530

Message-ID: <21c401dc6383$1e80dee0$5b829ca0$@co.uk>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_21C5_01DC63B1.38391AE0"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdxjXtGNmrbw/2bjT+ac8Z9f6jjW1A==

Content-Language: en-us



This is a multi-part message in MIME format.



------=_NextPart_000_21C5_01DC63B1.38391AE0

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hello,



I'm reaching out to see if there is anything that would like to create

Shopify & Wordpress, upgrade, repair, or redesign on your website or Mobile

App.



I am a web designer/developer that can do just about anything you can

imagine at very affordable prices.



Let me know what you think.



If you interested. please send me your requirements .



Thank you for your time and consideration.



Kind Regards,

Sonam